This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa
File: 3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa (raw, json)
Hash identifier: 7MkVhAQ/ZLkwVh+NMEQgiOXhv9KYJmUNU5ot6ZWOSOU=
Subject key identifier: A4:62:C6:79:63:FF:76:3F:9E:A5:C4:EB:9D:4E:AC:B2:23:1F:B4:28
Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D
Certificate serial: 315A7E243958AD3EF3F3301CBAD79B5695DBE44A
Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa
Signing time: Tue 20 Jan 2026 02:26:09 +0000
ROA not before: Tue 20 Jan 2026 02:21:09 +0000
ROA not after: Tue 19 Jan 2027 02:26:09 +0000
asID: 146762
IP address blocks: 114.111.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5a:7e:24:39:58:ad:3e:f3:f3:30:1c:ba:d7:9b:56:95:db:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D
Validity
Not Before: Jan 20 02:21:09 2026 GMT
Not After : Jan 19 02:26:09 2027 GMT
Subject: CN=A462C67963FF763F9EA5C4EB9D4EACB2231FB428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:2f:59:0f:a6:63:ed:a0:f2:cb:f2:68:0e:
25:41:b3:46:e3:ef:55:f1:8a:90:b9:45:5c:21:19:
6a:a7:e0:16:85:a4:bd:dc:e4:b6:7c:8b:97:35:cf:
ab:15:a5:dd:49:45:8b:5d:f8:a6:02:5d:df:cc:8f:
91:3d:d9:4a:a1:49:72:94:a7:cc:e8:d6:d3:87:d7:
ce:49:dc:a2:5d:1e:1c:52:74:80:c5:4c:69:de:71:
f1:61:36:8f:5e:af:a3:11:94:23:e0:04:45:3b:cd:
68:0f:32:fd:5c:79:fe:65:7b:dd:0a:c1:db:e5:77:
55:7b:6e:72:69:26:23:be:85:0c:a6:3e:87:ca:32:
5e:b6:11:67:de:fb:2c:b8:b3:0d:eb:a6:fa:09:73:
61:fc:5c:71:05:1f:24:83:24:3c:2a:7a:94:75:28:
78:c0:5e:08:25:e8:53:ed:e5:ef:36:f3:a8:99:a2:
2d:2e:e3:db:81:3e:ea:0b:52:08:61:1e:4b:aa:d0:
e7:5d:97:e1:ca:2e:aa:46:5a:37:23:27:7f:0a:c6:
86:30:0c:06:3a:4e:b8:56:98:2a:a2:4b:45:83:6a:
27:92:61:22:03:8e:e8:31:e1:7b:9b:55:f3:53:13:
0d:af:d5:83:31:48:23:0d:cd:ee:92:f6:21:53:85:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:C6:79:63:FF:76:3F:9E:A5:C4:EB:9D:4E:AC:B2:23:1F:B4:28
X509v3 Authority Key Identifier:
keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.111.177.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7a:45:3d:bc:e0:ea:1b:96:5e:15:f9:7d:86:97:7f:bf:35:
74:e4:3e:e1:b2:ae:b5:63:17:97:1e:38:76:e5:53:09:e9:ee:
f6:fa:dd:c5:d4:92:f2:c9:e3:0d:36:6e:af:5b:8d:e9:0c:85:
1d:7e:62:e0:a7:42:7f:ea:b1:e5:8d:52:a6:b2:16:33:0f:b0:
8f:e4:3e:5f:f0:3f:d9:71:0c:b2:55:f3:c6:1d:05:41:2b:62:
6d:08:08:48:6f:c2:96:e0:eb:4e:20:3e:f1:46:96:0e:96:39:
fe:f6:7b:99:71:f1:71:03:2b:9e:ac:91:2b:7d:78:93:32:50:
22:db:3b:10:99:8a:67:6a:3e:f7:1a:b2:75:4a:79:e6:26:4e:
d1:ab:79:aa:22:e0:67:31:d4:06:66:05:b1:f3:90:01:17:f0:
b6:d5:82:e7:fa:a6:79:90:f6:c6:89:51:2c:9b:08:48:0b:c9:
36:60:b8:3b:20:6f:76:f8:0c:15:2b:02:8a:5b:d0:be:3a:09:
48:b9:e5:7d:13:88:bc:36:0e:8a:f6:a1:97:52:fb:25:ea:f4:
03:dd:f0:b4:3c:3c:1e:71:5f:9c:f0:87:2e:28:4e:22:61:d6:
5b:3d:42:42:80:ae:2b:63:ad:85:60:11:2e:1f:04:26:e9:2b:
a6:d6:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:39 2026 by rpki-client